February 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0211-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 12 Feb '20

12 Feb '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0211-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: strawberry was updated to version 0.6.8: + Fixed stuck tabbar and collection GUI with some themes. + Fixed possible crashes related to QProxyStyle. + Fixed a bug where metadata in the playlist was not updated when editing metadata for the current playing track. + Fixed crash when deleting a folder with playlists. + Fixed restoring to correct screen when maximized. + Increased lyrics score if lyrics text is larger than 60 characters to avoid using "no lyrics available" text. + Made context title and summary changeable. + Added option to disable playlist clear button. + Added confirmation dialog before clearing playlists with more than 500 songs. + Added German, French, Italian and Indonesian translations. + Added StartupWMClass to desktop file. + Replaced use of Qt deprecated functionality as of 5.14. strawberry was updated to version 0.6.7: + Fixed crash when cancelling scrobbler authentication + Fixed "Double clicking a song in the playlist" behaviour setting + Fixed "Pressing Previous in player" behaviour setting + Fixed updating compilations where there are spaces or special characters in filenames + Fixed cases where songs were stuck in "Various Artists" because not all songs in the same compilation was removed from the model before readded with actual artist. + Fixed a bug when importing playlists where metadata was reset + Fixed scrobbler to also scrobble songs without album title + Fixed text for replay gain setting not loading in backend setting + Added back lyrics from Chartlyrics + Added ability to show fullsize cover on double-click in playing widget + Added separator between "unset cover" and "show fullsize" in popup menu + Removed left click on analyzer to popup menu + (Windows) Added killproc executable to terminate running process before uninstalling Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-211=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-211=1 Package List: - openSUSE Leap 15.1 (x86_64): strawberry-0.6.8-lp151.2.12.2 strawberry-debuginfo-0.6.8-lp151.2.12.2 strawberry-debugsource-0.6.8-lp151.2.12.2 - openSUSE Backports SLE-15-SP1 (x86_64): strawberry-0.6.8-bp151.2.11.2 strawberry-debuginfo-0.6.8-bp151.2.11.2 strawberry-debugsource-0.6.8-bp151.2.11.2 References:

1 0

openSUSE-SU-2020:0210-1: important: Security update for chromium
by opensuse-security＠opensuse.org 12 Feb '20

12 Feb '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0210-1 Rating: important References: #1162833 Cross-References: CVE-2019-18197 CVE-2019-19880 CVE-2019-19923 CVE-2019-19925 CVE-2019-19926 CVE-2020-6381 CVE-2020-6382 CVE-2020-6385 CVE-2020-6387 CVE-2020-6388 CVE-2020-6389 CVE-2020-6390 CVE-2020-6391 CVE-2020-6392 CVE-2020-6393 CVE-2020-6394 CVE-2020-6395 CVE-2020-6396 CVE-2020-6397 CVE-2020-6398 CVE-2020-6399 CVE-2020-6400 CVE-2020-6401 CVE-2020-6402 CVE-2020-6403 CVE-2020-6404 CVE-2020-6405 CVE-2020-6406 CVE-2020-6408 CVE-2020-6409 CVE-2020-6410 CVE-2020-6411 CVE-2020-6412 CVE-2020-6413 CVE-2020-6414 CVE-2020-6415 CVE-2020-6416 CVE-2020-6417 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 38 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to version 80.0.3987.87 (boo#1162833). Security issues fixed: - CVE-2020-6381: Integer overflow in JavaScript (boo#1162833). - CVE-2020-6382: Type Confusion in JavaScript (boo#1162833). - CVE-2019-18197: Multiple vulnerabilities in XML (boo#1162833). - CVE-2019-19926: Inappropriate implementation in SQLite (boo#1162833). - CVE-2020-6385: Insufficient policy enforcement in storage (boo#1162833). - CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite (boo#1162833). - CVE-2020-6387: Out of bounds write in WebRTC (boo#1162833). - CVE-2020-6388: Out of bounds memory access in WebAudio (boo#1162833). - CVE-2020-6389: Out of bounds write in WebRTC (boo#1162833). - CVE-2020-6390: Out of bounds memory access in streams (boo#1162833). - CVE-2020-6391: Insufficient validation of untrusted input in Blink (boo#1162833). - CVE-2020-6392: Insufficient policy enforcement in extensions (boo#1162833). - CVE-2020-6393: Insufficient policy enforcement in Blink (boo#1162833). - CVE-2020-6394: Insufficient policy enforcement in Blink (boo#1162833). - CVE-2020-6395: Out of bounds read in JavaScript (boo#1162833). - CVE-2020-6396: Inappropriate implementation in Skia (boo#1162833). - CVE-2020-6397: Incorrect security UI in sharing (boo#1162833). - CVE-2020-6398: Uninitialized use in PDFium (boo#1162833). - CVE-2020-6399: Insufficient policy enforcement in AppCache (boo#1162833). - CVE-2020-6400: Inappropriate implementation in CORS (boo#1162833). - CVE-2020-6401: Insufficient validation of untrusted input in Omnibox (boo#1162833). - CVE-2020-6402: Insufficient policy enforcement in downloads (boo#1162833). - CVE-2020-6403: Incorrect security UI in Omnibox (boo#1162833). - CVE-2020-6404: Inappropriate implementation in Blink (boo#1162833). - CVE-2020-6405: Out of bounds read in SQLite (boo#1162833). - CVE-2020-6406: Use after free in audio (boo#1162833). - CVE-2019-19923: Out of bounds memory access in SQLite (boo#1162833). - CVE-2020-6408: Insufficient policy enforcement in CORS (boo#1162833). - CVE-2020-6409: Inappropriate implementation in Omnibox (boo#1162833). - CVE-2020-6410: Insufficient policy enforcement in navigation (boo#1162833). - CVE-2020-6411: Insufficient validation of untrusted input in Omnibox (boo#1162833). - CVE-2020-6412: Insufficient validation of untrusted input in Omnibox (boo#1162833). - CVE-2020-6413: Inappropriate implementation in Blink (boo#1162833). - CVE-2020-6414: Insufficient policy enforcement in Safe Browsing (boo#1162833). - CVE-2020-6415: Inappropriate implementation in JavaScript (boo#1162833). - CVE-2020-6416: Insufficient data validation in streams (boo#1162833). - CVE-2020-6417: Inappropriate implementation in installer (boo#1162833). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-210=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-80.0.3987.87-bp151.3.59.1 chromium-80.0.3987.87-bp151.3.59.1 References: https://www.suse.com/security/cve/CVE-2019-18197.html https://www.suse.com/security/cve/CVE-2019-19880.html https://www.suse.com/security/cve/CVE-2019-19923.html https://www.suse.com/security/cve/CVE-2019-19925.html https://www.suse.com/security/cve/CVE-2019-19926.html https://www.suse.com/security/cve/CVE-2020-6381.html https://www.suse.com/security/cve/CVE-2020-6382.html https://www.suse.com/security/cve/CVE-2020-6385.html https://www.suse.com/security/cve/CVE-2020-6387.html https://www.suse.com/security/cve/CVE-2020-6388.html https://www.suse.com/security/cve/CVE-2020-6389.html https://www.suse.com/security/cve/CVE-2020-6390.html https://www.suse.com/security/cve/CVE-2020-6391.html https://www.suse.com/security/cve/CVE-2020-6392.html https://www.suse.com/security/cve/CVE-2020-6393.html https://www.suse.com/security/cve/CVE-2020-6394.html https://www.suse.com/security/cve/CVE-2020-6395.html https://www.suse.com/security/cve/CVE-2020-6396.html https://www.suse.com/security/cve/CVE-2020-6397.html https://www.suse.com/security/cve/CVE-2020-6398.html https://www.suse.com/security/cve/CVE-2020-6399.html https://www.suse.com/security/cve/CVE-2020-6400.html https://www.suse.com/security/cve/CVE-2020-6401.html https://www.suse.com/security/cve/CVE-2020-6402.html https://www.suse.com/security/cve/CVE-2020-6403.html https://www.suse.com/security/cve/CVE-2020-6404.html https://www.suse.com/security/cve/CVE-2020-6405.html https://www.suse.com/security/cve/CVE-2020-6406.html https://www.suse.com/security/cve/CVE-2020-6408.html https://www.suse.com/security/cve/CVE-2020-6409.html https://www.suse.com/security/cve/CVE-2020-6410.html https://www.suse.com/security/cve/CVE-2020-6411.html https://www.suse.com/security/cve/CVE-2020-6412.html https://www.suse.com/security/cve/CVE-2020-6413.html https://www.suse.com/security/cve/CVE-2020-6414.html https://www.suse.com/security/cve/CVE-2020-6415.html https://www.suse.com/security/cve/CVE-2020-6416.html https://www.suse.com/security/cve/CVE-2020-6417.html https://bugzilla.suse.com/1162833

1 0

openSUSE-RU-2020:0206-1: moderate: Recommended update for python-rpm-macros
by maintenance＠opensuse.org 11 Feb '20

11 Feb '20

openSUSE Recommended Update: Recommended update for python-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0206-1 Rating: moderate References: #1161770 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-rpm-macros fixes the following issues: - Add macros related to the Python dist metadata dependency generator. (bsc#1161770) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-206=1 Package List: - openSUSE Leap 15.1 (noarch): python-rpm-generators-20200117.8e39013-lp151.2.3.1 python-rpm-macros-20200117.8e39013-lp151.2.3.1 References: https://bugzilla.suse.com/1161770

1 0

openSUSE-SU-2020:0208-1: important: Security update for systemd
by opensuse-security＠opensuse.org 11 Feb '20

11 Feb '20

openSUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0208-1 Rating: important References: #1084671 #1092920 #1106383 #1133495 #1151377 #1154256 #1155207 #1155574 #1156213 #1156482 #1158485 #1159814 #1161436 #1162108 Cross-References: CVE-2019-20386 CVE-2020-1712 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has 12 fixes is now available. Description: This update for systemd fixes the following issues: - CVE-2020-1712 (bsc#bsc#1162108) Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted Dbus messages. - Use suse.pool.ntp.org server pool on SLE distros (jsc#SLE-7683) - libblkid: open device in nonblock mode. (bsc#1084671) - udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256) - bus_open leak sd_event_source when udevadm trigger。 (bsc#1161436 CVE-2019-20386) - fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (bsc#1133495 bsc#1159814) - fileio: initialize errno to zero before we do fread() - fileio: try to read one byte too much in read_full_stream() - logind: consider "greeter" sessions suitable as "display" sessions of a user (bsc#1158485) - logind: never elect a session that is stopping as display - journal: include kmsg lines from the systemd process which exec()d us (#8078) - udevd: don't use monitor after manager_exit() - udevd: capitalize log messages in on_sigchld() - udevd: merge conditions to decrease indentation - Revert "udevd: fix crash when workers time out after exit is signal caught" - core: fragments of masked units ought not be considered for NeedDaemonReload (#7060) (bsc#1156482) - udevd: fix crash when workers time out after exit is signal caught - udevd: wait for workers to finish when exiting (bsc#1106383) - Improve bash completion support (bsc#1155207) * shell-completion: systemctl: do not list template units in {re,}start * shell-completion: systemctl: pass current word to all list_unit* * bash-completion: systemctl: pass current partial unit to list-unit* (bsc#1155207) * bash-completion: systemctl: use systemctl --no-pager * bash-completion: also suggest template unit files * bash-completion: systemctl: add missing options and verbs * bash-completion: use the first argument instead of the global variable (#6457) - networkd: VXLan Make group and remote variable separate (bsc#1156213) - networkd: vxlan require Remote= to be a non multicast address (#8117) (bsc#1156213) - fs-util: let's avoid unnecessary strerror() - fs-util: introduce inotify_add_watch_and_warn() helper - ask-password: improve log message when inotify limit is reached (bsc#1155574) - shared/install: failing with -ELOOP can be due to the use of an alias in install_error() (bsc#1151377) - man: alias names can't be used with enable command (bsc#1151377) - Add boot option to not use swap at system start (jsc#SLE-7689) - Allow YaST to select Iranian (Persian, Farsi) keyboard layout (bsc#1092920) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-208=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsystemd0-234-lp151.26.7.1 libsystemd0-debuginfo-234-lp151.26.7.1 libsystemd0-mini-234-lp151.26.7.1 libsystemd0-mini-debuginfo-234-lp151.26.7.1 libudev-devel-234-lp151.26.7.1 libudev-mini-devel-234-lp151.26.7.1 libudev-mini1-234-lp151.26.7.1 libudev-mini1-debuginfo-234-lp151.26.7.1 libudev1-234-lp151.26.7.1 libudev1-debuginfo-234-lp151.26.7.1 nss-myhostname-234-lp151.26.7.1 nss-myhostname-debuginfo-234-lp151.26.7.1 nss-mymachines-234-lp151.26.7.1 nss-mymachines-debuginfo-234-lp151.26.7.1 nss-systemd-234-lp151.26.7.1 nss-systemd-debuginfo-234-lp151.26.7.1 systemd-234-lp151.26.7.1 systemd-container-234-lp151.26.7.1 systemd-container-debuginfo-234-lp151.26.7.1 systemd-coredump-234-lp151.26.7.1 systemd-coredump-debuginfo-234-lp151.26.7.1 systemd-debuginfo-234-lp151.26.7.1 systemd-debugsource-234-lp151.26.7.1 systemd-devel-234-lp151.26.7.1 systemd-logger-234-lp151.26.7.1 systemd-mini-234-lp151.26.7.1 systemd-mini-container-mini-234-lp151.26.7.1 systemd-mini-container-mini-debuginfo-234-lp151.26.7.1 systemd-mini-coredump-mini-234-lp151.26.7.1 systemd-mini-coredump-mini-debuginfo-234-lp151.26.7.1 systemd-mini-debuginfo-234-lp151.26.7.1 systemd-mini-debugsource-234-lp151.26.7.1 systemd-mini-devel-234-lp151.26.7.1 systemd-mini-sysvinit-234-lp151.26.7.1 systemd-sysvinit-234-lp151.26.7.1 udev-234-lp151.26.7.1 udev-debuginfo-234-lp151.26.7.1 udev-mini-234-lp151.26.7.1 udev-mini-debuginfo-234-lp151.26.7.1 - openSUSE Leap 15.1 (noarch): systemd-bash-completion-234-lp151.26.7.1 systemd-mini-bash-completion-234-lp151.26.7.1 - openSUSE Leap 15.1 (x86_64): libsystemd0-32bit-234-lp151.26.7.1 libsystemd0-32bit-debuginfo-234-lp151.26.7.1 libudev-devel-32bit-234-lp151.26.7.1 libudev1-32bit-234-lp151.26.7.1 libudev1-32bit-debuginfo-234-lp151.26.7.1 nss-myhostname-32bit-234-lp151.26.7.1 nss-myhostname-32bit-debuginfo-234-lp151.26.7.1 nss-mymachines-32bit-234-lp151.26.7.1 nss-mymachines-32bit-debuginfo-234-lp151.26.7.1 systemd-32bit-234-lp151.26.7.1 systemd-32bit-debuginfo-234-lp151.26.7.1 References: https://www.suse.com/security/cve/CVE-2019-20386.html https://www.suse.com/security/cve/CVE-2020-1712.html https://bugzilla.suse.com/1084671 https://bugzilla.suse.com/1092920 https://bugzilla.suse.com/1106383 https://bugzilla.suse.com/1133495 https://bugzilla.suse.com/1151377 https://bugzilla.suse.com/1154256 https://bugzilla.suse.com/1155207 https://bugzilla.suse.com/1155574 https://bugzilla.suse.com/1156213 https://bugzilla.suse.com/1156482 https://bugzilla.suse.com/1158485 https://bugzilla.suse.com/1159814 https://bugzilla.suse.com/1161436 https://bugzilla.suse.com/1162108

1 0

openSUSE-SU-2020:0204-1: moderate: Security update for nginx
by opensuse-security＠opensuse.org 11 Feb '20

11 Feb '20

openSUSE Security Update: Security update for nginx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0204-1 Rating: moderate References: #1160682 Cross-References: CVE-2019-20372 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for nginx fixes the following issues: - CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page configurations which could have allowed unauthorized web page reads (bsc#1160682). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-204=1 Package List: - openSUSE Leap 15.1 (noarch): nginx-source-1.14.2-lp151.4.6.1 vim-plugin-nginx-1.14.2-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): nginx-1.14.2-lp151.4.6.1 nginx-debuginfo-1.14.2-lp151.4.6.1 nginx-debugsource-1.14.2-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2019-20372.html https://bugzilla.suse.com/1160682

1 0

openSUSE-SU-2020:0209-1: important: Security update for libqt5-qtbase
by opensuse-security＠opensuse.org 11 Feb '20

11 Feb '20

openSUSE Security Update: Security update for libqt5-qtbase ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0209-1 Rating: important References: #1158667 #1161167 Cross-References: CVE-2020-0569 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libqt5-qtbase fixes the following issues: Security issue fixed: - CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD (bsc#1161167). Other issue fixed: - Fixed comboboxes not showing in correct location (bsc#1158667). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-209=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libQt5Bootstrap-devel-static-5.9.7-lp151.4.3.1 libQt5Concurrent-devel-5.9.7-lp151.4.3.1 libQt5Concurrent5-5.9.7-lp151.4.3.1 libQt5Concurrent5-debuginfo-5.9.7-lp151.4.3.1 libQt5Core-devel-5.9.7-lp151.4.3.1 libQt5Core5-5.9.7-lp151.4.3.1 libQt5Core5-debuginfo-5.9.7-lp151.4.3.1 libQt5DBus-devel-5.9.7-lp151.4.3.1 libQt5DBus-devel-debuginfo-5.9.7-lp151.4.3.1 libQt5DBus5-5.9.7-lp151.4.3.1 libQt5DBus5-debuginfo-5.9.7-lp151.4.3.1 libQt5Gui-devel-5.9.7-lp151.4.3.1 libQt5Gui5-5.9.7-lp151.4.3.1 libQt5Gui5-debuginfo-5.9.7-lp151.4.3.1 libQt5KmsSupport-devel-static-5.9.7-lp151.4.3.1 libQt5Network-devel-5.9.7-lp151.4.3.1 libQt5Network5-5.9.7-lp151.4.3.1 libQt5Network5-debuginfo-5.9.7-lp151.4.3.1 libQt5OpenGL-devel-5.9.7-lp151.4.3.1 libQt5OpenGL5-5.9.7-lp151.4.3.1 libQt5OpenGL5-debuginfo-5.9.7-lp151.4.3.1 libQt5OpenGLExtensions-devel-static-5.9.7-lp151.4.3.1 libQt5PlatformHeaders-devel-5.9.7-lp151.4.3.1 libQt5PlatformSupport-devel-static-5.9.7-lp151.4.3.1 libQt5PrintSupport-devel-5.9.7-lp151.4.3.1 libQt5PrintSupport5-5.9.7-lp151.4.3.1 libQt5PrintSupport5-debuginfo-5.9.7-lp151.4.3.1 libQt5Sql-devel-5.9.7-lp151.4.3.1 libQt5Sql5-5.9.7-lp151.4.3.1 libQt5Sql5-debuginfo-5.9.7-lp151.4.3.1 libQt5Sql5-mysql-5.9.7-lp151.4.3.1 libQt5Sql5-mysql-debuginfo-5.9.7-lp151.4.3.1 libQt5Sql5-postgresql-5.9.7-lp151.4.3.1 libQt5Sql5-postgresql-debuginfo-5.9.7-lp151.4.3.1 libQt5Sql5-sqlite-5.9.7-lp151.4.3.1 libQt5Sql5-sqlite-debuginfo-5.9.7-lp151.4.3.1 libQt5Sql5-unixODBC-5.9.7-lp151.4.3.1 libQt5Sql5-unixODBC-debuginfo-5.9.7-lp151.4.3.1 libQt5Test-devel-5.9.7-lp151.4.3.1 libQt5Test5-5.9.7-lp151.4.3.1 libQt5Test5-debuginfo-5.9.7-lp151.4.3.1 libQt5Widgets-devel-5.9.7-lp151.4.3.1 libQt5Widgets5-5.9.7-lp151.4.3.1 libQt5Widgets5-debuginfo-5.9.7-lp151.4.3.1 libQt5Xml-devel-5.9.7-lp151.4.3.1 libQt5Xml5-5.9.7-lp151.4.3.1 libQt5Xml5-debuginfo-5.9.7-lp151.4.3.1 libqt5-qtbase-common-devel-5.9.7-lp151.4.3.1 libqt5-qtbase-common-devel-debuginfo-5.9.7-lp151.4.3.1 libqt5-qtbase-debugsource-5.9.7-lp151.4.3.1 libqt5-qtbase-devel-5.9.7-lp151.4.3.1 libqt5-qtbase-examples-5.9.7-lp151.4.3.1 libqt5-qtbase-examples-debuginfo-5.9.7-lp151.4.3.1 libqt5-qtbase-platformtheme-gtk3-5.9.7-lp151.4.3.1 libqt5-qtbase-platformtheme-gtk3-debuginfo-5.9.7-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): libQt5Core-private-headers-devel-5.9.7-lp151.4.3.1 libQt5DBus-private-headers-devel-5.9.7-lp151.4.3.1 libQt5Gui-private-headers-devel-5.9.7-lp151.4.3.1 libQt5KmsSupport-private-headers-devel-5.9.7-lp151.4.3.1 libQt5Network-private-headers-devel-5.9.7-lp151.4.3.1 libQt5OpenGL-private-headers-devel-5.9.7-lp151.4.3.1 libQt5PlatformSupport-private-headers-devel-5.9.7-lp151.4.3.1 libQt5PrintSupport-private-headers-devel-5.9.7-lp151.4.3.1 libQt5Sql-private-headers-devel-5.9.7-lp151.4.3.1 libQt5Test-private-headers-devel-5.9.7-lp151.4.3.1 libQt5Widgets-private-headers-devel-5.9.7-lp151.4.3.1 libqt5-qtbase-private-headers-devel-5.9.7-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libQt5Bootstrap-devel-static-32bit-5.9.7-lp151.4.3.1 libQt5Concurrent-devel-32bit-5.9.7-lp151.4.3.1 libQt5Concurrent5-32bit-5.9.7-lp151.4.3.1 libQt5Concurrent5-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5Core-devel-32bit-5.9.7-lp151.4.3.1 libQt5Core5-32bit-5.9.7-lp151.4.3.1 libQt5Core5-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5DBus-devel-32bit-5.9.7-lp151.4.3.1 libQt5DBus-devel-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5DBus5-32bit-5.9.7-lp151.4.3.1 libQt5DBus5-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5Gui-devel-32bit-5.9.7-lp151.4.3.1 libQt5Gui5-32bit-5.9.7-lp151.4.3.1 libQt5Gui5-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5Network-devel-32bit-5.9.7-lp151.4.3.1 libQt5Network5-32bit-5.9.7-lp151.4.3.1 libQt5Network5-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5OpenGL-devel-32bit-5.9.7-lp151.4.3.1 libQt5OpenGL5-32bit-5.9.7-lp151.4.3.1 libQt5OpenGL5-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5OpenGLExtensions-devel-static-32bit-5.9.7-lp151.4.3.1 libQt5PlatformSupport-devel-static-32bit-5.9.7-lp151.4.3.1 libQt5PrintSupport-devel-32bit-5.9.7-lp151.4.3.1 libQt5PrintSupport5-32bit-5.9.7-lp151.4.3.1 libQt5PrintSupport5-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5Sql-devel-32bit-5.9.7-lp151.4.3.1 libQt5Sql5-32bit-5.9.7-lp151.4.3.1 libQt5Sql5-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5Sql5-mysql-32bit-5.9.7-lp151.4.3.1 libQt5Sql5-mysql-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5Sql5-postgresql-32bit-5.9.7-lp151.4.3.1 libQt5Sql5-postgresql-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5Sql5-sqlite-32bit-5.9.7-lp151.4.3.1 libQt5Sql5-sqlite-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5Sql5-unixODBC-32bit-5.9.7-lp151.4.3.1 libQt5Sql5-unixODBC-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5Test-devel-32bit-5.9.7-lp151.4.3.1 libQt5Test5-32bit-5.9.7-lp151.4.3.1 libQt5Test5-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5Widgets-devel-32bit-5.9.7-lp151.4.3.1 libQt5Widgets5-32bit-5.9.7-lp151.4.3.1 libQt5Widgets5-32bit-debuginfo-5.9.7-lp151.4.3.1 libQt5Xml-devel-32bit-5.9.7-lp151.4.3.1 libQt5Xml5-32bit-5.9.7-lp151.4.3.1 libQt5Xml5-32bit-debuginfo-5.9.7-lp151.4.3.1 libqt5-qtbase-examples-32bit-5.9.7-lp151.4.3.1 libqt5-qtbase-examples-32bit-debuginfo-5.9.7-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-0569.html https://bugzilla.suse.com/1158667 https://bugzilla.suse.com/1161167

1 0

openSUSE-SU-2020:0207-1: important: Security update for wicked
by opensuse-security＠opensuse.org 11 Feb '20

11 Feb '20

openSUSE Security Update: Security update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0207-1 Rating: important References: #1160904 #1160906 Cross-References: CVE-2019-18903 CVE-2020-7217 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for wicked fixes the following issues: - CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IA_PD option (bsc#1160904). - CVE-2020-7217: Fixed a memory leak in DHCP4 fsm when processing packets for other client ids (bsc#1160906). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-207=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): wicked-0.6.60-lp151.2.9.1 wicked-debuginfo-0.6.60-lp151.2.9.1 wicked-debugsource-0.6.60-lp151.2.9.1 wicked-service-0.6.60-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-18903.html https://www.suse.com/security/cve/CVE-2020-7217.html https://bugzilla.suse.com/1160904 https://bugzilla.suse.com/1160906

1 0

openSUSE-RU-2020:0205-1: Recommended update for openldap2
by maintenance＠opensuse.org 11 Feb '20

11 Feb '20

openSUSE Recommended Update: Recommended update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0205-1 Rating: low References: #1158921 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openldap2 provides the following fix: - Add libldap-data to the product (as it contains ldap.conf). (bsc#1158921) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-205=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libldap-2_4-2-2.4.46-lp151.10.6.1 libldap-2_4-2-debuginfo-2.4.46-lp151.10.6.1 openldap2-2.4.46-lp151.10.6.1 openldap2-back-meta-2.4.46-lp151.10.6.1 openldap2-back-meta-debuginfo-2.4.46-lp151.10.6.1 openldap2-back-perl-2.4.46-lp151.10.6.1 openldap2-back-perl-debuginfo-2.4.46-lp151.10.6.1 openldap2-back-sock-2.4.46-lp151.10.6.1 openldap2-back-sock-debuginfo-2.4.46-lp151.10.6.1 openldap2-back-sql-2.4.46-lp151.10.6.1 openldap2-back-sql-debuginfo-2.4.46-lp151.10.6.1 openldap2-client-2.4.46-lp151.10.6.1 openldap2-client-debuginfo-2.4.46-lp151.10.6.1 openldap2-contrib-2.4.46-lp151.10.6.1 openldap2-contrib-debuginfo-2.4.46-lp151.10.6.1 openldap2-debuginfo-2.4.46-lp151.10.6.1 openldap2-debugsource-2.4.46-lp151.10.6.1 openldap2-devel-2.4.46-lp151.10.6.1 openldap2-devel-static-2.4.46-lp151.10.6.1 openldap2-ppolicy-check-password-1.2-lp151.10.6.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp151.10.6.1 - openSUSE Leap 15.1 (noarch): libldap-data-2.4.46-lp151.10.6.1 openldap2-doc-2.4.46-lp151.10.6.1 - openSUSE Leap 15.1 (x86_64): libldap-2_4-2-32bit-2.4.46-lp151.10.6.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp151.10.6.1 openldap2-devel-32bit-2.4.46-lp151.10.6.1 References: https://bugzilla.suse.com/1158921

1 0

openSUSE-RU-2020:0202-1: moderate: Recommended update for apr
by maintenance＠opensuse.org 11 Feb '20

11 Feb '20

openSUSE Recommended Update: Recommended update for apr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0202-1 Rating: moderate References: #1151059 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apr fixes the following issues: - Increase timeout to fix random failure of testsuite [bsc#1151059]. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-202=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apr-debugsource-1.6.3-lp151.3.3.1 apr-devel-1.6.3-lp151.3.3.1 libapr1-1.6.3-lp151.3.3.1 libapr1-debuginfo-1.6.3-lp151.3.3.1 References: https://bugzilla.suse.com/1151059

1 0

openSUSE-RU-2020:0203-1: moderate: Recommended update for bluez
by maintenance＠opensuse.org 11 Feb '20

11 Feb '20

openSUSE Recommended Update: Recommended update for bluez ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0203-1 Rating: moderate References: #1156544 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for bluez fixes the following issues: - The 32-bit 'SIOCGSTAMP' has been deprecated. Use the deprecated name to fix the build.(bsc#1156544) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-203=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): bluez-5.48-lp151.8.9.1 bluez-cups-5.48-lp151.8.9.1 bluez-cups-debuginfo-5.48-lp151.8.9.1 bluez-debuginfo-5.48-lp151.8.9.1 bluez-debugsource-5.48-lp151.8.9.1 bluez-devel-5.48-lp151.8.9.1 bluez-test-5.48-lp151.8.9.1 bluez-test-debuginfo-5.48-lp151.8.9.1 libbluetooth3-5.48-lp151.8.9.1 libbluetooth3-debuginfo-5.48-lp151.8.9.1 - openSUSE Leap 15.1 (x86_64): bluez-devel-32bit-5.48-lp151.8.9.1 libbluetooth3-32bit-5.48-lp151.8.9.1 libbluetooth3-32bit-debuginfo-5.48-lp151.8.9.1 - openSUSE Leap 15.1 (noarch): bluez-auto-enable-devices-5.48-lp151.8.9.1 References: https://bugzilla.suse.com/1156544

1 0